Date: Thu, 21 Feb 2002 03:32:23 -0800 (PST) From: Vlado <vlado@pc042.otanner9.kas.tut.fi> To: freebsd-gnats-submit@FreeBSD.org Subject: conf/35178: ipfilter for IPV6 not availlable in rc.* Message-ID: <200202211132.g1LBWN570853@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 35178
>Category: conf
>Synopsis: ipfilter for IPV6 not availlable in rc.*
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Thu Feb 21 03:40:01 PST 2002
>Closed-Date:
>Last-Modified:
>Originator: Vlado
>Release: STABLE
>Organization:
>Environment:
FreeBSD pc042.otanner9.kas.tut.fi 4.5-STABLE FreeBSD 4.5-STABLE #0: Mon Feb 18 13:57:17 EET 2002 vlado@pc042.otanner9.kas.tut.fi:/usr/obj/usr/src/sys/Ifrit i386
>Description:
When ipfilter is enabled in rc.conf, it loads firewall rules for
IP4. To load rules for IPV6, it's necessary to use ipf -6 <whatever>. Thus to use ipfilter on ipv6 enabled computer, hack to rc.network is necessary, to load also rules for ipv6 otherwise if kernel option IPFILTER_DEFAULT_BLOCK is used, ipv6 trafic if blocked by default...
>How-To-Repeat:
>Fix:
Add ipfilter6_rules to rc.conf, giving it rules files for ipv6.
Add ipfilter test to rc.network6 and load rules if desired.
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200202211132.g1LBWN570853>